wodu.ca
Issued by R3
About this certificate
This digital certificate with serial number 03:9c:19:59:19:41:72:70:26:1b:1d:8c:ed:35:fe:b4:07:88 was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=wodu.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9c:19:59:19:41:72:70:26:1b:1d:8c:ed:35:fe:b4:07:88Serial Number (int): 314454600361507660262120162152774645319560
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 57:97:06:82:09:fd:5c:0f:37:d9:e7:dd:74:a8:f5:ad:d0:25:52:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:db:38:4d:ed:64:0f:70:38:6d:b2:4a:a9:52:34:a1:18:0b:04:82
Fingerprint (sha256): fc:4d:81:ba:12:7f:a7:9b:27:c8:27:7a:55:0b:77:10:9a:bd:41:b8:64:d3:72:bd:6d:9e:1f:02:66:e4:40:38
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate wodu.ca
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wodu.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitragepodcast.com.domaincartoons.com
artsandcraftsden.com
e-slip.com
gogreenoregon.com
greenland.biz.trailerskirting.com
hometownstrong.com
losangelescommercialproperty.com
pearlpalacepoker.com
vision-os.com
volvamosalapalabra.com.bequia.com
wodu.ca
artsandcraftsden.com
e-slip.com
gogreenoregon.com
greenland.biz.trailerskirting.com
hometownstrong.com
losangelescommercialproperty.com
pearlpalacepoker.com
vision-os.com
volvamosalapalabra.com.bequia.com
wodu.ca
Other certificates including the domain name wodu.ca
(limited to 100 certificates)
dieharddrone.com
wodu.ca
ijumprsa.com
www.aimanager.ca
wodu.ca
www.wilfma.com
wodu.ca
outdoorsandindoors.com
www.dental-resource.com
ssl-5zl9y.epik.to
electriccarfilm.com
propholdings.co.za
wodu.ca
www.aidcuba.com
wodu.ca
www.beaufortschome.com
wodu.ca
www.hunt4.estate
wodu.ca
www.ab2c.com
www.firewoodstand.com
globalcouncilofnations.org.wodu.ca
www.smokeokie.com
wodu.ca
wodu.ca
www.soarweb.com
ssl-5zl9y.epik.to
wong.media
www.claimsadjusters.com
wodu.ca
wodu.ca
ijumprsa.com
www.aimanager.ca
wodu.ca
www.wilfma.com
wodu.ca
outdoorsandindoors.com
www.dental-resource.com
ssl-5zl9y.epik.to
electriccarfilm.com
propholdings.co.za
wodu.ca
www.aidcuba.com
wodu.ca
www.beaufortschome.com
wodu.ca
www.hunt4.estate
wodu.ca
www.ab2c.com
www.firewoodstand.com
globalcouncilofnations.org.wodu.ca
www.smokeokie.com
wodu.ca
wodu.ca
www.soarweb.com
ssl-5zl9y.epik.to
wong.media
www.claimsadjusters.com
wodu.ca
Certificate
The complete raw certificate details for wodu.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgISA5wZWRlBcnAmGx2M7TX+tAeIMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDcxNDQ1NTVaFw0yNDAzMDYxNDQ1NTRaMBIxEDAOBgNVBAMT B3dvZHUuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcZBl8jlm n3Ipmxinbo/EGEGxbWuVk8FFeyITYRQCxAynsdrugaH1ETHK1DMSR6Mja/V2UUXC JewIuTorYc4IZS9KNc5pgIthBMcklkJWInQco1CQGXltZcfY+GG6bfS8NU9kZEKo ooEBVFSdMSanRzik0nz/JkY00Nd//M0l5gIE5yjB99vqPyocrlxxHaRmMUuSvv+N JzUNcsDsYyGnknOfalcvj3PuK7/r5+WLYa+zzTlLtgiI94BmJ/bR7NJV6nK9ftcy gWIsVYv5XSD2kTi5RjURL8zsTaGxyhoLZITlcHS4wipJqIi7cHqSAlglNwyTMXuq l8V4ZGw9v4hvAgMBAAGjggMOMIIDCjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFeX BoIJ/VwPN9nn3XSo9a3QJVKsMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIBFQYD VR0RBIIBDDCCAQiCJ2FyYml0cmFnZXBvZGNhc3QuY29tLmRvbWFpbmNhcnRvb25z LmNvbYIUYXJ0c2FuZGNyYWZ0c2Rlbi5jb22CCmUtc2xpcC5jb22CEWdvZ3JlZW5v cmVnb24uY29tgiFncmVlbmxhbmQuYml6LnRyYWlsZXJza2lydGluZy5jb22CEmhv bWV0b3duc3Ryb25nLmNvbYIgbG9zYW5nZWxlc2NvbW1lcmNpYWxwcm9wZXJ0eS5j b22CFHBlYXJscGFsYWNlcG9rZXIuY29tgg12aXNpb24tb3MuY29tgiF2b2x2YW1v c2FsYXBhbGFicmEuY29tLmJlcXVpYS5jb22CB3dvZHUuY2EwEwYDVR0gBAwwCjAI BgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG /kA7Z9hPw/THvQANLXJv4frUFwAAAYxE9P2zAAAEAwBHMEUCIQCthGLbBcwqe3/n /A4fla9iqVzIPb4HT+cHycOA1zmdmAIgFCxiCO0YnKqOJEL6RKYbmRLCHNQBMJMV +tE9rtVL9isAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYxE 9P3BAAAEAwBHMEUCIF1ZJTK1AMPckAji6z6bHespKcoORKf4dXe5lZeYHnGlAiEA y1d2cOqQpLOttdGJSdbmF3qhXH0McE0A8luA05CT/7MwDQYJKoZIhvcNAQELBQAD ggEBAKvmxOlgWKd8WqWOQMXgj2qLxuM2G1daSXKq9Ku0x+lr/jx9toOrsiYlB+8K WwJCv5z5IaeSotoC36EEmHMvrBQaQD7aDdlugINItSgg3CXH34YsYZr0VhjztS1p ro/loXR/xJcBxGaZlzDf4AWPDhyZ6Rd7jOAw2jdtja5/y5qfaKnFmUvCXmbTNHY1 /i51j8UFZ3pgCkWuQEl6GU+PJIj0Ik0mha+DAb1o6+HQZYGiBImCwTxfSnclJMLd RSSXWnmGqnhwVtwcU/4WlwokgFFTO6UH5bYAg2kgYE+7kj8SOHIXejOfQJw4b+Z5 bpeQVNdPQmq98dkOKEUEdTsY5Vk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HGQZfI5Zp9yKZsYp26P xBhBsW1rlZPBRXsiE2EUAsQMp7Ha7oGh9RExytQzEkejI2v1dlFFwiXsCLk6K2HO CGUvSjXOaYCLYQTHJJZCViJ0HKNQkBl5bWXH2Phhum30vDVPZGRCqKKBAVRUnTEm p0c4pNJ8/yZGNNDXf/zNJeYCBOcowffb6j8qHK5ccR2kZjFLkr7/jSc1DXLA7GMh p5Jzn2pXL49z7iu/6+fli2Gvs805S7YIiPeAZif20ezSVepyvX7XMoFiLFWL+V0g 9pE4uUY1ES/M7E2hscoaC2SE5XB0uMIqSaiIu3B6kgJYJTcMkzF7qpfFeGRsPb+I bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 314454600361507660262120162152774645319560 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 14:45:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 14:45:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wodu.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26313567955912489365946961420856987150558683444142634978543395751712298455867357810482642994433114746604290718619556827516280552925924722880305710418529471892614542786526295267797039832063480166513591286949588348456474518222294657489986822477160935570585909277029718867906263003377490132500291889498801030515106036059974438238721383780789344286703588179262718463953088595104319601142378810681938389379536875439277925045018730300383769666964146062350413905791725079830253405452766350456397330529951801163075012748202932253346449880621855753878621328401417329787228469002319073072941611735275836902195641541646979401839 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5797068209fd5c0f37d9e7dd74a8f5add02552ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (268 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragepodcast.com.domaincartoons.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsandcraftsden.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-slip.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreenoregon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenland.biz.trailerskirting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometownstrong.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangelescommercialproperty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearlpalacepoker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision-os.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volvamosalapalabra.com.bequia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wodu.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c44f4fdb30000040300473045022100ad8462db05cc2a7b7fe7fc0e1f95af62a95cc83dbe074fe707c9c380d7399d980220142c6208ed189caa8e2442fa44a61b9912c21cd401309315fad13daed54bf62b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c44f4fdc1000004030047304502205d592532b500c3dc9008e2eb3e9b1deb2929ca0e44a7f87577b99597981e71a5022100cb577670ea90a4b3adb5d18949d6e6177aa15c7d0c704d00f25b80d39093ffb3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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